CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/03/2026 |
| CVE-2026-21668 | 보통6.5 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. | 12/03/2026 |
| CVE-2026-21667 | 높음8.8 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | 12/03/2026 |
| CVE-2026-21666 | 높음8.8 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | 12/03/2026 |
| CVE-2025-59470 | 심각9.0 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter. | 08/01/2026 |
| CVE-2025-59469 | 심각9.0 | This vulnerability allows a Backup or Tape Operator to write files as root. | 08/01/2026 |
| CVE-2025-59468 | 심각9.1 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a
malicious password parameter. | 08/01/2026 |
| CVE-2025-55125 | 심각9.8 | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious
backup configuration file. | 08/01/2026 |
| CVE-2025-48984 | 높음8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | 31/10/2025 |
| CVE-2025-48983 | 심각9.9 | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user. | 31/10/2025 |
| CVE-2025-24286 | 보통4.9 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. | 19/06/2025 |
| CVE-2025-23121 | 높음8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | 19/06/2025 |
| CVE-2025-23120 | 높음8.8 | A vulnerability allowing remote code execution (RCE) for domain users. | 20/03/2025 |
| CVE-2024-45204 | 보통4.3 | A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader s | 04/12/2024 |
| CVE-2024-42457 | 보통6.5 | A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management interface. This can be achieved using a session object that allows for credential enumeration and exploitation, leading to the leak of plaintex | 04/12/2024 |
| CVE-2024-42456 | 높음8.8 | A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical configuration settings, such as modifying the trusted client certificate used for authentication on a specific port. This can result in unauthorized access, enabling the use | 04/12/2024 |
| CVE-2024-42455 | 높음8.1 | A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The vulnerability is cause | 04/12/2024 |